Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/bf5a64-8aaf-44a8-bace-36850df4e997/1/_ORf1v09kyaEwMW8J_T6YVoQkOA.mft
File:                     _ORf1v09kyaEwMW8J_T6YVoQkOA.mft (raw, json)
Hash identifier:          MOElWPTZ+NRNoPNNuDbcvyntv1vWJCuRIcq0xtNHgEM=
Subject key identifier:   07:5C:E0:F2:D5:10:B7:68:3E:78:6F:5F:13:A7:BD:A0:E0:45:8D:E2
Authority key identifier: FC:E4:5F:D6:FD:3D:93:26:84:C0:C5:BC:27:F4:FA:61:5A:10:90:E0
Certificate issuer:       /CN=fce45fd6fd3d932684c0c5bc27f4fa615a1090e0
Certificate serial:       018F874AEA6361057E4EB58AFF4D28C4FC12
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_ORf1v09kyaEwMW8J_T6YVoQkOA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/bf5a64-8aaf-44a8-bace-36850df4e997/1/_ORf1v09kyaEwMW8J_T6YVoQkOA.mft
Manifest number:          07FB
Signing time:             Fri 17 May 2024 16:03:04 +0000
Manifest this update:     Fri 17 May 2024 16:03:04 +0000
Manifest next update:     Sat 18 May 2024 16:03:04 +0000
Files and hashes:         1: _ORf1v09kyaEwMW8J_T6YVoQkOA.crl (hash: 7DuD7oMK08zCtHPpe29zjnbWtTrsCL8sC7m9gP2Hmas=)
                          2: duL8yPkAdwsv2KWwKQ7jxWfSR2o.roa (hash: tXD3NKZEEBJeJTqLp5JLT1dHFODb0cFhjE5ly1FZ/MM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3b/bf5a64-8aaf-44a8-bace-36850df4e997/1/_ORf1v09kyaEwMW8J_T6YVoQkOA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3b/bf5a64-8aaf-44a8-bace-36850df4e997/1/_ORf1v09kyaEwMW8J_T6YVoQkOA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_ORf1v09kyaEwMW8J_T6YVoQkOA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:03:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:ea:63:61:05:7e:4e:b5:8a:ff:4d:28:c4:fc:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fce45fd6fd3d932684c0c5bc27f4fa615a1090e0
        Validity
            Not Before: May 17 16:03:04 2024 GMT
            Not After : May 18 16:03:04 2024 GMT
        Subject: CN=075ce0f2d510b7683e786f5f13a7bda0e0458de2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:8a:80:17:88:49:c6:17:75:e0:09:3e:95:8f:
                    a4:f6:6b:8a:83:e9:9d:26:5f:e5:22:e8:30:7c:ff:
                    74:b0:69:e9:25:da:e3:e6:4c:39:29:23:da:02:0b:
                    15:15:71:5e:a8:28:6c:7a:ad:db:ef:d9:5b:f5:77:
                    a2:ef:ee:2f:12:4d:bd:86:f7:d2:39:d5:23:b7:7b:
                    c3:1e:f6:9f:6d:32:17:42:07:2b:64:3f:85:ca:51:
                    87:14:51:af:7f:cd:e1:e6:0c:5a:89:a9:23:08:8d:
                    65:36:72:3b:e6:b0:c8:e8:e5:40:00:60:ea:8c:41:
                    f2:4e:ad:51:53:96:b2:98:3e:df:6a:10:54:f7:66:
                    2e:a9:f1:23:7b:48:5a:38:4f:15:73:ce:f0:15:3f:
                    f5:7e:b9:15:05:67:b7:80:05:ab:a2:6a:63:f4:97:
                    57:ed:e2:cb:30:da:58:ed:02:d6:70:86:1c:27:f9:
                    47:5b:ce:ac:59:7a:e1:d8:ff:0e:ba:1f:0c:75:d4:
                    2a:6d:7b:df:5a:93:59:4e:2a:11:ae:74:1e:0b:f0:
                    9c:40:08:0f:78:f4:9e:e1:2d:13:a9:70:5e:64:76:
                    cc:ae:ed:3d:ff:24:68:64:5d:0f:e7:a6:e5:92:fc:
                    ea:fc:4a:22:f4:0a:64:6f:54:6c:43:8c:17:97:cf:
                    70:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:5C:E0:F2:D5:10:B7:68:3E:78:6F:5F:13:A7:BD:A0:E0:45:8D:E2
            X509v3 Authority Key Identifier:
                keyid:FC:E4:5F:D6:FD:3D:93:26:84:C0:C5:BC:27:F4:FA:61:5A:10:90:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ORf1v09kyaEwMW8J_T6YVoQkOA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/bf5a64-8aaf-44a8-bace-36850df4e997/1/_ORf1v09kyaEwMW8J_T6YVoQkOA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/bf5a64-8aaf-44a8-bace-36850df4e997/1/_ORf1v09kyaEwMW8J_T6YVoQkOA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:4d:53:54:6a:a4:85:6a:4a:0c:59:5e:42:37:de:de:7a:f6:
         9a:28:02:1a:95:d6:18:0c:9f:08:b2:c6:48:27:0c:a3:c6:5e:
         ba:fc:4b:dc:10:c6:b3:dd:7b:e7:b6:cb:f5:6d:2e:80:32:b0:
         20:04:3f:0f:6c:e3:c4:1b:cb:fe:2c:52:5f:69:fc:31:5d:88:
         40:37:05:2e:25:c3:76:03:e7:e8:d4:c7:4b:c1:ef:de:24:09:
         3a:9c:2c:99:65:c0:e2:fe:37:8a:08:f4:0c:a9:a4:3a:73:23:
         97:9d:33:8b:62:b2:bd:da:0c:3c:6b:65:ef:ae:fd:69:c4:d8:
         42:34:a4:df:66:a7:06:4a:aa:39:e2:1b:33:96:b0:1b:23:44:
         36:09:d7:a8:96:8a:37:14:65:c2:51:be:6b:fc:27:1d:7c:d4:
         eb:ff:ba:a5:f9:43:78:b2:d5:c3:d0:c4:9f:be:e9:17:d1:6d:
         09:73:df:bf:01:1f:a4:8e:a0:ca:a2:d6:4e:4d:5b:c9:73:dc:
         b5:22:82:de:28:db:27:03:ce:26:32:3f:d6:24:1b:85:73:0e:
         09:4d:48:4c:45:72:19:4e:d2:cd:ce:30:f0:bd:6f:1b:f4:9e:
         e2:d2:7c:45:13:f9:e0:80:24:4b:82:84:00:18:bb:d3:cf:bf:
         f5:60:53:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:45:58 2024 by rpki-client on console-fra.rpki-client.org